Setting up a Forensic Workstation

This course will teach you how to prepare a workstation for forensic analysis using virtual machines, hardware and software tools.
Course info
Level
Intermediate
Updated
Nov 19, 2020
Duration
1h 2m
Table of contents
Description
Course info
Level
Intermediate
Updated
Nov 19, 2020
Duration
1h 2m
Description

Setting up a forensic case can be tedious. In this course, Create a Forensic Workstation, you’ll learn how to create a workstation that can be used in forensic analysis. This includes understanding virtual machines, installing and using forensic tools, and how to properly backup and recover sensitive data. Next, you’ll learn about chain of custody when analyzing data, virtual machine checkpoints and sandboxing applications for forensic use. Finally, you’ll learn how to use specific forensic applications to analyze the data and create a report for those who have initiated the investigation.

About the author
About the author

Professor Robert McMillen (MCT, MCSE) has over 20 years of experience in IT Consulting. He teaches at two local colleges and hosts the weekly All Tech Radio show in the Portland area.

More from the author
More courses by Robert McMillen
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hello. My name is Robert McMillen. I would like to welcome you to my course, Setting up a Forensic Workstation. I'm a Microsoft Certified Trainer, consultant, and college instructor. In this course, we discover how to set up and configure a forensic workstation in Windows 10 so a case could be created and used for legal purposes, and that includes a court of law. You'll understand how to create and use virtual machines and how they can be used in a forensic investigation. Then we'll install forensic applications where we scan and investigate hard drive images and virtual machines. You'll also learn how to analyze the data properly, including how to see deleted data and data that has been obfuscated. You'll learn Windows Hyper‑V on a Windows 10 computer, Autopsy forensic application and features, and FTK Imager to analyze your data. Reporting is also covered so you can submit data to executives in a way that is easily understood. By the end of this course, you'll be able to build a forensic workstation and open and manage a forensic case. I hope you'll join me in learning these great technologies in my course, Setting up a Forensic Workstation.